Missing description for security group/security group rule.

Explanation

Security groups and security group rules should include a description for auditing purposes.

Simplifies auditing, debugging, and managing security groups.

Possible Impact

Descriptions provide context for the firewall rule reasons

Suggested Resolution

Add descriptions for all security groups and rules

Insecure Example

The following example will fail the aws-elasticache-add-description-for-security-group check.

resource "aws_security_group" "bar" {
  name = "security-group"
}

resource "aws_elasticache_security_group" "bad_example" {
  name                 = "elasticache-security-group"
  security_group_names = [aws_security_group.bar.name]
  description = ""
}

Secure Example

The following example will pass the aws-elasticache-add-description-for-security-group check.

resource "aws_security_group" "bar" {
  name = "security-group"
}

resource "aws_elasticache_security_group" "good_example" {
  name                 = "elasticache-security-group"
  security_group_names = [aws_security_group.bar.name]
  description = "something"
}

Getting Started
Provider Checks
Config
GitHub Actions